HNHacker News
TopNewBestAskShowJobs

stacktrust

1,687 karma · joined April 17, 2022

submissionscomments
stacktrust··on The Pumpkin Eclipse
OPNsense automatic updates are relatively conservative.
stacktrust··on The Pumpkin Eclipse
> My dream is to intercept the write-enable lines on the flash chips holding these firmwares so I can lock out updates. And schedule a daily reboot for any memory-resident-only crap.

There was an open hardware project for SD card emulation, where the emulator could reject writes, https://github.com/racklet/meeting-notes/blob/main/community...

OSS emulation for SPI flash, https://trmm.net/Spispy/

Some USB drives (Kanguru) and SSD enclosures (ElecGear M.2 2230 NVME) have firmware and physical switch to block writes, useful to boot custom "live ISOs" that run from RAM.

stacktrust··on The Pumpkin Eclipse
Some consumer routers (e.g. Amazon eero) have moved to cloud/app config and automatic updates.

A read-only partition can bootstrap recovery from cloud, if the main firmware or config is damaged.

Some updates are possible with live kernel patching of the memory-resident OS, which can also be used by malware.

stacktrust··on The Pumpkin Eclipse
A physical switch can be locally toggled by the device owner/admin.

Some motherboards offer a physical jumper for firmware updates, including x86 PC Engines APU2 coreboot router.

stacktrust··on The Pumpkin Eclipse
Windows has a stateless mode.

https://learn.microsoft.com/en-us/windows/iot/iot-enterprise...

> Unified Write Filter (UWF) is an optional Windows 10 feature that helps to protect your drives by intercepting and redirecting any writes to the drive (app installations, settings changes, saved data) to a virtual overlay. The virtual overlay is a temporary location that is cleared during a reboot or when a guest user logs off.. Increases security and reliability where new apps aren't frequently added. Can be used to reduce wear on solid-state drives and other write-sensitive media. Optimizing Application load timing on boot – it can be faster to resume from a HORM file on every boot rather than reloading the system on each boot. UWF replaces the Windows 7 Enhanced Write Filter (EWF) and the File Based Write Filter (FBWF).

stacktrust··on Android's theft protection features
My iOS devices are in lockdown mode 99% of the time. To disable lockdown mode, go into Settings > Privacy > Lockdown Mode, it offers the option to "Turn Off and Restart", then asks for a passcode.

The behavior being described sounds a bit like malware. If it happens again, the best option is to Force Restart (VolUp, VolDown, hold side button until the device reboots), which cannot be intercepted by any apps which might be trying to simulate iOS system prompts.

stacktrust··on Android's theft protection features
> I can get into the phone with my pin just fine, but the phone is still locked down. When lockdown mode disables biometric auth, I couldn’t get into bank, brokerage or any app requiring that auth.

Never heard of this behavior, but it's not associated with the Apple feature called "Lockdown Mode", which does not constrain use of secure enclaves for Touch ID or Face ID authentication, https://support.apple.com/en-us/105120

stacktrust··on Android's theft protection features
What were the visible indicators that the phone had entered lockdown mode? It usually requires user consent, followed by reboot.

iOS Lockdown Mode does not usually constrain the method of unlocking the phone.

stacktrust··on Android's theft protection features
> resetting deletes my phone number too

There's an option during reset to keep the eSIM, https://allthings.how/how-to-factory-reset-iphone-without-er...

stacktrust··on Apple announces new accessibility features, including eye tracking
Avoidable via iPhone SE3 and iPad Air, which both use TouchID.
stacktrust··on Apple announces new accessibility features, including eye tracking
iOS 17 audio image descriptions for blind people via Image Magnifier should work on all iPhones, but do not work on iPhone SE3 and iPhone 11 Pro. Audio image descriptions do work in iPhone 12 Pro. Lidar in 12 Pro increases accuracy, but should not be mandatory. Hopefully this is a bug that can be fixed, since text descriptions were still functional on the lower-end devices.

Source: purchased devices until finding one that worked, since Apple docs indicated the feature should work on all iPhones that can run iOS 17.

Edit: audio descriptions in Magnifier are non-functional on iPad Air, working on M2 iPad Pro.

stacktrust··on Apple announces new accessibility features, including eye tracking
> developed solely with the benefit of the user in mind

Hopefully accessibility features are never artificially segmented to higher priced devices.

stacktrust··on Apple announces new accessibility features, including eye tracking
iOS 17 Image Descriptions are quite good, but audio descriptions don't seem to work on non-Pro devices, even though text descriptions are being shown on the screen and the audio menu is present and activated. Is that a bug?

Even on Pro devices, audio image descriptions stop working after a few cycles of switching between Image Magnifier and apps/home. This can be fixed by restarting the app and disabling/enabling audio image descriptions, but that breaks the use case when an iPhone is dedicated to running only Image Magnifier + audio descriptions, via remote MDM with no way for the local blind user to restart the app.

On-device iOS image descriptions could be improved if the user could help train the local image recognition by annotating photos or videos with text descriptions. For a blind person, this would enable locally-specific audio descriptions like "bedroom door", "kitchen fridge" or specific food dishes.

Are there other iOS or Android AR apps which offer audio descriptions of live video from the camera?

stacktrust··on Assistive Technology: Stress Less Drink Holder for Vision Impaired Diners [video]
Available here: https://store.wcblind.org/store/kitchen
stacktrust··on Ask HN: How to manage phones and PCs for elderly parents?
Yes, you can disable Passcode in Apple Configurator, which uses a Mac to create the XML policy profile.

There's also an OSS project for iOS/macOS configuration profiles.

https://github.com/ProfileCreator/ProfileCreator/wiki

https://github.com/ProfileCreator/ProfileCreator

https://github.com/ProfileCreator/ProfileManifests

stacktrust··on Ask HN: How to manage phones and PCs for elderly parents?
It's even broader than tech support. For some reason, services and vendors for the elderly fall somewhere between clinical, patronizing and exploitative. Yet there's so much opportunity to help the elderly with independent living, e.g. accessible furniture and living spaces.

I've found a grand total of one good vendor (Mobb) in home health care, with quality and pricing, plus a few original designs, with manufacturing in Taiwan. They may be a positive outlier because they are a subsidiary of a larger business selling medical uniforms.

The challenge seems to be that most products for the elderly are designed for institutional buyers like nursing homes or state/national governments. So you have the usual misaligned incentives when the buyer is not the user (see: enterprise software).

stacktrust··on Ask HN: How to manage phones and PCs for elderly parents?
To dedicate a device to one app, iOS/macOS has single-app / kiosk mode via Apple Configurator.
stacktrust··on Ask HN: How to manage phones and PCs for elderly parents?
> I think the only thing better would be some kind of immutable OS, where each reboot restores it to its original state. I haven’t set up anything like this on hardware, but I’ve seen it as a VM offering.

Stateless Windows: https://news.ycombinator.com/item?id=40127728

stacktrust··on Ask HN: How to manage phones and PCs for elderly parents?
> most computers will last longer than them

With a life expectancy of 80, there's 15 years from 65-80.

Chromebook lifetime: https://support.google.com/chrome/a/answer/6220366

stacktrust··on Amazon Echo Hacking Wiki
Yes, they update firmware and the version is reported in the Alexa app.

GPL source code for Echo devices: https://www.amazon.com/gp/help/customer/display.html?nodeId=...

stacktrust··on Amazon Echo Hacking Wiki
Thanks for the insight, albeit disappointing.
stacktrust··on Multi-purpose Haptic Smart Knob with open-source software (2022)
Build video: https://hackaday.com/2022/06/24/an-in-depth-look-at-the-hapt...
stacktrust··on Amazon Echo Hacking Wiki
Blink cameras are another Amazon product with unique hardware (low energy cameras) and software with room for improvement.
stacktrust··on Amazon Echo Hacking Wiki
2016, "A Survey of Various Methods for Analyzing the Amazon Echo", Military College of South Carolina, https://vanderpot.com/Clinton_Cook_Paper.pdf

  Our research sets out to look at how this system of interconnected smart devices affects our privacy.. and how can we show this with a practical analysis and vulnerability analysis of our own smart devices.
2019, "Smart Home Personal Assistants: A Security and Privacy Review", Kings College London, https://arxiv.org/abs/1903.05593

  Even though the attack surface of SPA is conspicuously broad and there has been a significant amount of recent research efforts in this area, research has so far focused on a small part of the attack surface.. this is the first..  characterization of the security and privacy issues and countermeasures of SPA.
2022, "A survey on security analysis of Amazon Echo Devices", U of Texas, Miami U, Kent State, https://www.sciencedirect.com/science/article/pii/S266729522...

  We conclude that though numerous privacy concerns and security vulnerabilities associated with the device are mitigated, many vulnerabilities still need to be addressed.
stacktrust··on Cally: Accessibility Statement
From the docs:

  The aim is not to give you a full date picker, instead only the lower-level building blocks that allow you to build your own. You likely already have your own inputs, buttons, popover etc components. So why not use them?
stacktrust··on LineageOS is currently installed on 1.5M Android devices
The team at WayAround have done a good job of integrating slightly-custom-for-small-premium NFC tags with their smartphone app and optional dedicated reader. Non-technical customers can buy tags designed for clothing buttons, magnets, stickers, clips and more. Techies can use generic tags + magic string.

https://www.wayaround.com (custom) and https://gototags.com (generic).

stacktrust··on LineageOS is currently installed on 1.5M Android devices
BlindShell sells a phone for vision-impaired users, with support for popular assistive apps, plus audio for NFC tags, https://blindshellusa.com.
stacktrust··on Ask HN: Can the old ExpressCard spec for laptops be revived for new products?
Some more ideas in the HN discussion, https://news.ycombinator.com/item?id=33076160
stacktrust··on Ask HN: Can the old ExpressCard spec for laptops be revived for new products?
ExpressCard to M.2 NVME, https://ounapuu.ee/posts/2022/10/04/testing-expresscard-nvme...
stacktrust··on I built an offline smart home
Alexa has been most reliable when a command does not require a third-party cloud service.

For Amazon Basics WiFi smart plugs, the device type can be configured as "Light" instead of "Plug".

Echo 4 works as a Zigbee hub, avoiding dependency on a third-party cloud service.

← PreviousPage 2 of 6Next →